Each gate is binary. Failing tests are red. Passing tests are green. UAT is sign-off, not "kinda done". Security blocks the release, not the budget.